I cannot figure out how to generate a base64 encoded Certificate Signing Request (CSR) with any of the OpenSC tools. The wiki page states : [quote]The SmartCard-HSM driver extracts required PKCS#11 public key object from certificates stored on the device. For newly generated key pairs without a ce…

You would need to use OpenSSL to generate the certificate signing request (CSR). Furthermore you would need to tell OpenSSL to utilize OpenSC’s pkcs#11 engine to access the Nitrokey. Think of OpenSC’s pkcs#11 engine as a driver or middleware for the hardware. See: github.com/OpenSC/OpenSC/wiki/S … i…

Nitrokey Support

How To generate CSR with the Smart Card-HSM

Nitrokeys

travisspencer November 6, 2017, 7:20am 6

This seems related. Advice there is to use a new version of OpenSC. I did that, but perhaps I did it wrong. Will test…